7.1
High
CVE-2026-40791 Unauthenticated Cross Site Scripting (XSS) in WP Time Slots Booking Form <= 1.2.46 versions
Description
Unauthenticated Cross Site Scripting (XSS) in WP Time Slots Booking Form <= 1.2.46 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Time Slots Booking Form 1.2 | earliest → 1.2.46 | No fix stated |
Other CVEs of WP Time Slots Booking Form
The 11 CVEs of WP Time Slots Booking Form →
CVE-2026-48882
Subscriber SQL Injection in WP Time Slots Booking Form <= 1.2.50 versions
8.5
High
CVE-2026-32432
Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows…
5.3
Medium
CVE-2025-68569
Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows…
6.5
Medium
CVE-2025-49332
Cross-Site Request Forgery (CSRF) vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form…
4.3
Medium